Four keys to creating a vendor risk management program that works

<?xml version="1.0" encoding="UTF-8"?><modsCollection xmlns="http://www.loc.gov/mods/v3" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-8.xsd">
<mods version="3.8">
<titleInfo>
<title>Four keys to creating a vendor risk management program that works</title>
</titleInfo>
<name type="corporate" xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20180002069">
<namePart>ProcessUnity</namePart>
<nameIdentifier>MAPA20180002069</nameIdentifier>
</name>
<typeOfResource>text</typeOfResource>
<originInfo>
<place>
<placeTerm type="code" authority="marccountry">usa</placeTerm>
</place>
<issuance>monographic</issuance>
<place>
<placeTerm type="text">Concord, Massachusetts</placeTerm>
</place>
<publisher>ProcessUnity</publisher>
<dateIssued>2014</dateIssued>
</originInfo>
<language>
<languageTerm type="code" authority="iso639-2b">eng</languageTerm>
</language>
<physicalDescription>
<form authority="marcform">print</form>
</physicalDescription>
<abstract displayLabel="Summary"> A vendor risk management program is a formal way to evaluate, track and measure third-party risk; to assess its impact on all aspects of your business; and to develop compensating controls or other forms of mitigation to lessen the impact on your business if something should happen. A program of this nature gives you consistency for managing your vendors and a way to share information about them within your organization. Whether your VRM program is manual or automated, homegrown or offtheshelf, the important thing is that it reflects and enforces your internal controls framework, ensures your compliance with government or industry regulations, and achieves consistency with all of your vendors.</abstract>
<note type="statement of responsibility">ProcessUnity</note>
<subject xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20080628529">
<topic>Programas de gerencia de riesgos</topic>
</subject>
<subject xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20080591182">
<topic>Gerencia de riesgos</topic>
</subject>
<subject xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20080588953">
<topic>Análisis de riesgos</topic>
</subject>
<subject xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20080584344">
<topic>Control de riesgos</topic>
</subject>
<subject xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20080601522">
<topic>Evaluación de riesgos</topic>
</subject>
<subject xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20080546991">
<topic>Empresas</topic>
</subject>
<subject xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="MAPA20140011766">
<topic>Cumplimiento</topic>
</subject>
<classification authority="">7</classification>
<recordInfo>
<recordContentSource authority="marcorg">MAP</recordContentSource>
<recordCreationDate encoding="marc">180228</recordCreationDate>
<recordChangeDate encoding="iso8601">20180306115422.0</recordChangeDate>
<recordIdentifier source="MAP">MAP20180006043</recordIdentifier>
<languageOfCataloging>
<languageTerm type="code" authority="iso639-2b">spa</languageTerm>
</languageOfCataloging>
</recordInfo>
</mods>
</modsCollection>